Developer Avoids Backdoor via AI Code Review After Fake Recruiter Approach
A social engineering attack targeting a Python developer through LinkedIn reveals how npm lifecycle hooks…
Year: 2026
CISA Mandates Federal Patch for Maximum-Severity Joomla JCE Plugin Flaw
Active exploitation of a critical vulnerability in the widely used JCE plugin has prompted CISA…
US Federal Government Discloses 3,611 AI Use Cases, Most With Little Public Accountability
The Trump administration's OMB inventory reveals a sweeping expansion of AI across sensitive government functions,…
Rockwell Automation CompactLogix Controllers Carry Two Vulnerabilities Enabling Denial-of-Service
Unauthenticated network access to CIP Connection IDs exposed via the web interface creates a viable…
Council of Europe Investigates ShinyHunters Breach Claims
The intergovernmental body says it is probing allegations made by the prolific extortion group over…
Cisco Catalyst SD-WAN Manager Path Traversal Flaw Added to CISA’s Known Exploited Vulnerabilities Catalogue
An authenticated attacker can create or overwrite arbitrary files on affected systems, and exploitation in…
Chinese Espionage Group Maintained Year-Long Access to Medical and Military Networks
UNC6508 deployed custom malware through REDCap servers, stealing sensitive emails via fake compliance rules.
Anti-AI License Terms Expose Automated Code Scanning Vulnerabilities
A Java testing tool's hidden bot commands and malware that exploits AI safety mechanisms reveal…
US Government Orders Anthropic to Suspend AI Models Over Alleged Jailbreaking Capability
Export control directive forces immediate shutdown of Fable 5 and Mythos 5 models based on…
FCC Proposes Ending Anonymous Burner Phone Sales
Regulator seeks to close identity verification gap as cybercriminals increasingly rely on untraceable communications.